UTMStack ISO install - DNS Errors

[ccesario]

Hi folks, I have installed the UTMStack using the latest ISO available - https://cdn.utmstack.com/iso/utmstack-v10-1-0-autoinstall.iso .
The installation process is OK.

But I´m facing problems with DNS resolution, because I have configured the Sophos Central Integration and I dit not receive no information, then looking the /var/log/syslog I could see errors about the it.

Mar 27 14:04:58 UTMStackServer dockerd[23071]: time="2025-03-27T14:04:58.801619226Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:56572" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:56572->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA" Mar 27 14:05:24 UTMStackServer dockerd[23071]: time="2025-03-27T14:05:24.689884996Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:36057" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:36057->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA" Mar 27 14:06:25 UTMStackServer dockerd[23071]: time="2025-03-27T14:06:25.315630580Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:36172" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:36172->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA" Mar 27 14:06:30 UTMStackServer dockerd[23071]: time="2025-03-27T14:06:30.364290112Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:35589" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:35589->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA" Mar 27 14:07:30 UTMStackServer dockerd[23071]: time="2025-03-27T14:07:30.587411349Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:41448" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:41448->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA" Mar 27 14:08:25 UTMStackServer dockerd[23071]: time="2025-03-27T14:08:25.926349205Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:34101" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:34101->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA"

I can see other errors with other domains.

But my DNS and network resolution is OK.

root@UTMStackServer:/home/utmstack# nslookup id.sophos.com
Server:         127.0.0.53
Address:        127.0.0.53#53

Non-authoritative answer:
Name:   id.sophos.com
Address: 3.163.63.23
Name:   id.sophos.com
Address: 3.163.63.69
Name:   id.sophos.com
Address: 3.163.63.104
Name:   id.sophos.com
Address: 3.163.63.51

root@UTMStackServer:/home/utmstack# ping id.sophos.com
PING id.sophos.com (3.163.63.23) 56(84) bytes of data.
64 bytes from server-3-163-63-23.gru3.r.cloudfront.net (3.163.63.23): icmp_seq=1 ttl=242 time=11.5 ms
64 bytes from server-3-163-63-23.gru3.r.cloudfront.net (3.163.63.23): icmp_seq=2 ttl=242 time=11.4 ms
^C
--- id.sophos.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 11.392/11.442/11.493/0.050 ms

I have tested from the docket alpine image in same server

root@UTMStackServer:/home/utmstack# docker exec -it f42ea156fc99 sh
/ # nslookup id.sophos.com
Server:         192.168.60.254
Address:        192.168.60.254:53

Non-authoritative answer:
Name:   id.sophos.com
Address: 3.163.63.51
Name:   id.sophos.com
Address: 3.163.63.23
Name:   id.sophos.com
Address: 3.163.63.69
Name:   id.sophos.com
Address: 3.163.63.104

Non-authoritative answer:

/ # ping id.sophos.com
PING id.sophos.com (3.163.63.69): 56 data bytes
64 bytes from 3.163.63.69: seq=0 ttl=242 time=11.480 ms
64 bytes from 3.163.63.69: seq=1 ttl=242 time=11.489 ms
64 bytes from 3.163.63.69: seq=2 ttl=242 time=11.662 ms
^C
--- id.sophos.com ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 11.480/11.543/11.662 ms
/ #

Could someone has idea about it ?

Best regards

Carlos

[ccesario]

More relevant LOGS

Mar 28 01:45:31 UTMStackServer dockerd[23071]: time="2025-03-28T01:45:31.728673021Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:34427" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:34427->192.168.60.254:53: i/o timeout" question=";login.microsoftonline.com.\tIN\t AAAA"
Mar 28 02:40:32 UTMStackServer dockerd[23071]: time="2025-03-28T02:40:32.688306697Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:58314" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:58314->192.168.60.254:53: i/o timeout" question=";login.microsoftonline.com.\tIN\t AAAA"
Mar 28 02:40:37 UTMStackServer dockerd[23071]: time="2025-03-28T02:40:37.761123519Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:52258" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:52258->192.168.60.254:53: i/o timeout" question=";login.microsoftonline.com.\tIN\t AAAA"
.168.60.146:33836" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:33836->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:01:10 UTMStackServer dockerd[23071]: time="2025-03-28T12:01:10.157496222Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:33158" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:33158->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:02:45 UTMStackServer dockerd[23071]: time="2025-03-28T12:02:45.477418758Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:56106" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:56106->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:03:11 UTMStackServer dockerd[23071]: time="2025-03-28T12:03:11.295965638Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:57538" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:57538->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:03:45 UTMStackServer dockerd[23071]: time="2025-03-28T12:03:45.925077505Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:56440" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:56440->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:03:11 UTMStackServer dockerd[23071]: time="2025-03-28T12:03:11.295965638Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:57538" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:57538->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:03:15 UTMStackServer dockerd[23071]: time="2025-03-28T12:03:15.491543796Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:55862" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:55862->192.168.60.254:53: i/o timeout" question=";_grpc_config.agentmanager.\tIN\t TXT"
Mar 28 12:01:10 UTMStackServer dockerd[23071]: time="2025-03-28T12:01:10.157496222Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:33158" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:33158->192.168.60.254:53: i/o timeout" question=";sts.amazonaws.com.\tIN\t AAAA"
Mar 28 12:01:40 UTMStackServer dockerd[23071]: time="2025-03-28T12:01:40.691106299Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:43365" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:43365->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA"
Mar 28 12:02:11 UTMStackServer dockerd[23071]: time="2025-03-28T12:02:11.100356453Z" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:192.168.60.146:43775" dns-server="udp:192.168.60.254:53" error="read udp 192.168.60.146:43775->192.168.60.254:53: i/o timeout" question=";id.sophos.com.\tIN\t AAAA"

Docker logs report error too

Regards

[ccesario]

Only to report.
After upgrade to version 10.7.2. This problem it was fixed.

DNS resolution it is OK, Sophos Central l is sync!!

Thank you!

Regards
Carlos